Actually, I distinguish between vendor-supplied
software, and local
software which is installed by (sometimes, "written by") the system's local community of users.
I set up an account, perhaps called maint (yeah, I'm an old VM/370 guy ...),
which is responsible for ... and which owns ... directories such as /usr/local
important that software which is "in a public place" must not be modifiable by
the people who are intended to use it. Thus, the "local" applications are installed by, and thereafter owned by, this user ... which is not
privileged, and which cannot
issue the sudo
command. This protects the software from modification ... intentional, or by "oopsie!"
Incidentally, my "ordinary user" accounts do not
have the ability to issue sudo
. "Yes, I own a Captain Marvel suit, but my name is not Billy Batson, and I nothing
happens when I say, 'Shazam!'